Re: Webten asphixy (The Continuing Saga)

[Michael Reilly <mcrnmc@xxxxxxx>]

Alas, it seems to report the proper thing for me. But my server hung 
at 1:47am last night and wasn't discovered until 10am this morning. I 
hate this...at least when it was crashing, I could deal with it. All 
I get now is a email telling me it's down, which doesn't help when 
I'm asleep at home.

I still think the problem has to be related to this error:

[Wed Oct  3 11:14:50 2001] accept: (client socket): Connection refused
[Wed Oct  3 11:14:51 2001] pid 75 Child 90 returned a fatal error - 
Apache is exiting!

I did a search through my archived error logs from 5/9/01 through 
10/2/01 and this error first appeared 9/18/01. It showed up:

9/18 1 time
9/24 15 times
9/25 3 times
9/26 4 times
9/27 2 times
9/28 1 time
10/1 5 times
10/2 10 times

I have looked up some of the times in the transfer log and see 
nothing obvious as far as requested file or any other sort of 
pattern. They seem to be regular files being served at that time. So 
unless the offending thing isn't being logged, it might not be an 
offending request made to the server but perhaps some other type of 
attack?

McAffee reports that the date of discovery for NIMDA is 9/18 which is 
when this started showing up. It's also about the time these stalls 
started to occur for me. On around 9/26 I did a full format and 
reinstall of my server software, and copied over only the settings 
files from WebTen, while reconfiguring everything else from scratch. 
I think this helped overall stability, but the stalls continue.

Anyone know how to write an applescript that I can run remotely to 
tell Webten on that machine to quit and restart? For now I'm having 
Kickoff restart nightly, but that'll only help if the stall happens 
before the restart. I thought I was forming a pattern, last nights 
stall was around 2am, the night before around 1:45am, but the two 
before that were like 8:30pm and 2:10pm.

Michael


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Michael Reilly
Webmaster
Rochester Institute of Technology
National Technical Institute for the Deaf
Marketing Communications Department

Email: mcrnmc@xxxxxxx
Phone: (716) 475-5722 V/TTY
Fax:   (716) 475-5623
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

---------                    ----------
Tenon Intersystems' webten Mailing List
To unsubscribe: send mailto://webten-request@xxxxxxxxxxxxxxx
with the body: unsubscribe
Find searchable Mailing List archives at:
http://listsearch.blueworld.com/webtensearch.lasso